Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
File:                     z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft (raw, json)
Hash identifier:          aXbcH53ER/np50IHy20IYARiSgd55DSV9I1ApQgBkVg=
Subject key identifier:   83:86:6C:76:EC:8A:C2:52:5C:3C:E9:01:B8:E6:D9:61:3A:B3:F6:D0
Authority key identifier: CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4
Certificate issuer:       /CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
Certificate serial:       0197C1C8B4A41E67ED654CDD749A7590A824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
Manifest number:          02BB
Signing time:             Mon 30 Jun 2025 17:00:45 +0000
Manifest this update:     Mon 30 Jun 2025 17:00:45 +0000
Manifest next update:     Tue 01 Jul 2025 17:00:45 +0000
Files and hashes:         1: z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl (hash: 5ksb0hnW9UuU+y/I3SjsZF5zL4g19GO3Ju11WFbroic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 15:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c1:c8:b4:a4:1e:67:ed:65:4c:dd:74:9a:75:90:a8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
        Validity
            Not Before: Jun 30 17:00:45 2025 GMT
            Not After : Jul  1 17:00:45 2025 GMT
        Subject: CN=83866c76ec8ac2525c3ce901b8e6d9613ab3f6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:5c:f4:66:c1:0e:d4:41:14:e1:4d:fc:69:
                    94:1a:f5:e3:78:2b:de:d9:51:b7:4f:55:5f:9d:58:
                    e6:6c:b2:cc:39:79:32:37:ed:d0:db:8f:fb:8b:db:
                    59:e0:04:1c:a5:80:f3:4d:39:f2:ce:cc:5a:93:27:
                    3b:a4:a1:ff:fa:4d:55:4d:ea:76:be:72:96:b7:04:
                    81:cd:5d:a7:eb:71:c8:78:12:8d:ff:45:28:43:a1:
                    c8:16:21:c6:a5:a0:df:25:0f:4a:8e:87:50:41:6b:
                    8b:82:86:8f:19:77:b3:0d:01:e9:cd:d6:b8:94:fd:
                    2d:c6:47:3e:59:1c:c0:38:f4:ab:89:71:18:b4:16:
                    19:02:70:8d:af:f4:01:ac:c6:84:49:02:d1:f3:8f:
                    d1:26:4d:a7:d9:fb:89:83:13:09:20:c5:ba:dd:59:
                    22:99:ff:9a:c4:a6:71:41:ec:c7:f5:03:33:b6:41:
                    c7:83:ba:3a:3c:31:ba:a7:04:59:44:2b:6c:a7:be:
                    14:36:9a:ad:4d:a9:be:b0:f0:c2:48:a5:f9:74:e3:
                    50:ad:87:25:93:ca:e0:72:e4:54:64:9a:78:dc:d4:
                    b4:b2:65:42:3c:9f:06:24:67:41:bc:6c:11:ed:f3:
                    c3:7a:75:a0:63:0a:f7:f6:d8:1b:2d:66:2b:dc:85:
                    81:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:86:6C:76:EC:8A:C2:52:5C:3C:E9:01:B8:E6:D9:61:3A:B3:F6:D0
            X509v3 Authority Key Identifier:
                keyid:CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f9:a6:a0:09:ab:0b:ef:d4:7d:17:c9:cf:f5:dd:95:2a:1e:
         88:35:c5:61:83:83:a5:37:c8:60:bb:f6:08:77:66:b0:0d:85:
         03:53:22:95:7f:51:2b:58:29:c5:82:5e:84:cc:a3:32:c2:4b:
         90:55:f0:bd:b0:4c:89:53:68:87:ad:7e:eb:e2:fe:6e:36:6e:
         6b:22:a7:d4:0d:fd:ae:89:5d:09:4b:6d:7f:35:f9:05:70:af:
         21:3f:fd:02:69:84:8f:26:24:94:8a:d8:f6:68:58:a8:dc:d8:
         2f:90:6d:d2:a7:4b:92:00:91:0d:18:d1:ce:4a:d2:d2:98:5a:
         52:62:8d:c7:80:6d:40:a2:4a:48:29:5c:f3:f4:63:6a:df:5a:
         db:f9:4f:4d:5a:bc:83:90:cc:8c:36:e5:0b:9a:0f:5f:1b:29:
         e4:fe:56:2b:23:32:d2:f6:06:8c:06:c1:65:e3:e5:1f:44:bf:
         47:af:15:d5:4f:10:53:cc:5b:11:87:79:4b:8d:fd:36:fa:cb:
         f9:28:e2:1a:cf:79:b6:e5:de:5c:0e:52:9d:98:40:bd:56:40:
         08:f3:a7:81:db:8f:67:32:aa:b4:ed:7d:1d:2b:d9:87:c1:4a:
         99:54:a8:6e:03:03:72:ed:45:80:e8:d8:ed:b0:04:6f:e8:f0:
         5b:f3:1c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:01:39 2025 by rpki-client